Vulnerability · Published Sep 19, 2022 · Assigned by trendmicro
CVE-2022-37347
Medium 5.5
In plain English
A medium-severity out-of-bounds read in Trend Micro Security (Consumer) from Trend Micro. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).
Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.3%top 80.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vulnerability that could allow an attacker to read sensitive information from other memory locations and cause a crash on an affected machine. This vulnerability is similar to, but not the same as CVE-2022-35234.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Trend Micro | Trend Micro Security (Consumer) | 2022 (17.7.1383 and below) |
Weakness: CWE-125 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
References
- https://helpcenter.trendmicro.com/en-us/article/tmka-11058 x_refsource_MISC
- https://www.zerodayinitiative.com/advisories/ZDI-22-1176/ x_refsource_MISC